Validating passcode evaluates to false

[MikeTeddyOmondi]

When generating a new TOTP is successful:

      const config = generateConfig({
        digits: 6,
        period: 30,
        algo: "sha256",
        secretSize: 10,
      });

      const secret = TOTP_SECRET; // from ENV variable;
      const codes = Totp.generatePasscodes({ secret }, config);
      const totp = codes[0];

But when validating the just newly created TOTP it evaluates to false:

    const { totp } = req.body;
    const secret = TOTP_SECRET; // from ENV variable

    const config = {
      digits: 6,
      period: 30,
      algo: "sha256",
      secretSize: 10,
    };

    const isValid = Totp.validate(
      {
        passcode: totp,
        secret: secret,
      },
      config
    );
    console.log({ isValid }); // Evaluates to false when the totp is valid

What could be wrong with my code?

[godinc0]

Hi,

Thanks for reporting an issue.

Just to make sure the problem not coming from the secret itself can you show me how did you generate the secret ?

Thank you !

[MikeTeddyOmondi]

@MarcAndreG I used the generateSecret() function provided then added it to the .env file
Like this:
const secret = TOTP_SECRET; // generateSecret();
but then I realised I also need to use this secret in another route in a backend API that's why I generated another secret and then added it to the .env file for referencing in the other route where I wanted to validate the totp

[godinc0]

Yes you need to use the same secret to validate.

[MikeTeddyOmondi]

I am still using the same secret as shown above in the code. under secret key and value.
And what if you generate secret using the generateSecret() function?